@sayknow-cli/coding-agent 0.5.14 → 0.5.15

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [0.5.15] - 2026-09-16
+
+### Fixed
+
+- Native `UserPromptSubmit` UI-skill routing no longer lets a failed install-root lookup swallow the bundled skill directive. Candidate `SKILL.md` probes are best-effort, and hook tests isolate `home` so a runner's `~/.agents/skills` cannot pollute CI.
+
 ## [0.5.14] - 2026-09-16
 
 ### Added

package/dist/types/hooks/native-skill-hook.d.ts

@@ -7,6 +7,7 @@ export interface SkcNativeHookDispatchResult {
 type HookPayload = Record<string, unknown>;
 interface SkcNativeHookDispatchOptions {
     cwd?: string;
+    home?: string;
     stateDir?: string;
     effectiveSkillConfig?: EffectiveSkillConfigInput;
     configPaths?: string[];

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@sayknow-cli/coding-agent",
-	"version": "0.5.14",
+	"version": "0.5.15",
 	"description": "Sayknow-CLI CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://sayknow-cli.com",
 	"author": "jaybeyond",
@@ -54,12 +54,12 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@sayknow-cli/stats": "0.5.14",
-		"@sayknow-cli/agent-core": "0.5.14",
-		"@sayknow-cli/ai": "0.5.14",
-		"@sayknow-cli/natives": "0.5.14",
-		"@sayknow-cli/tui": "0.5.14",
-		"@sayknow-cli/utils": "0.5.14",
+		"@sayknow-cli/stats": "0.5.15",
+		"@sayknow-cli/agent-core": "0.5.15",
+		"@sayknow-cli/ai": "0.5.15",
+		"@sayknow-cli/natives": "0.5.15",
+		"@sayknow-cli/tui": "0.5.15",
+		"@sayknow-cli/utils": "0.5.15",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",

package/src/hooks/native-skill-hook.ts

@@ -28,6 +28,7 @@ type HookPayload = Record<string, unknown>;
 
 interface SkcNativeHookDispatchOptions {
 	cwd?: string;
+	home?: string;
 	stateDir?: string;
 	effectiveSkillConfig?: EffectiveSkillConfigInput;
 	configPaths?: string[];
@@ -342,12 +343,18 @@ export async function dispatchSkcNativeSkillHook(
 			};
 		}
 		// Frontend skills SKC routes to but does not vendor (license-restricted
-		// collections). Resolved against the user's own install roots.
-		const externalUiContext = await buildExternalUiSkillContext({
-			cwd,
-			home: os.homedir(),
-			text: prompt,
-		});
+		// collections). Resolved against the user's own install roots. A lookup
+		// failure must not swallow the bundled UI-skill directive.
+		let externalUiContext: string | null = null;
+		try {
+			externalUiContext = await buildExternalUiSkillContext({
+				cwd,
+				home: options.home ?? os.homedir(),
+				text: prompt,
+			});
+		} catch {
+			externalUiContext = null;
+		}
 		const additionalContext = [
 			skillState ? buildSkillActivationAdditionalContext(skillState, effectiveSkillConfig) : activeUltragoalContext,
 			// Bundled frontend UI skills are advertised independently of workflow

package/src/hooks/ui-skill-keywords.ts

@@ -264,7 +264,11 @@ function skillCandidatePaths(cwd: string, home: string, skill: string): string[]
 
 async function isSkillInstalled(cwd: string, home: string, skill: string): Promise<boolean> {
 	for (const candidate of skillCandidatePaths(cwd, home, skill)) {
-		if (await Bun.file(candidate).exists()) return true;
+		try {
+			if (await Bun.file(candidate).exists()) return true;
+		} catch {
+			// Permission or I/O on a candidate must not fail the prompt hook.
+		}
 	}
 	return false;
 }